Cyber Threat Analytics Analyst

LAM RESEARCH Corporation; Tualatin (OR); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Lam Research in the United States is seeking a Cyber Threat Analytics Analyst to identify and develop detections across SIEM and behavioral analytics, partnering with SOC, IR, and Vulnerability Management teams to improve detection coverage and reduce false positives.

The role includes translating threat intel into actionable detections, tuning rules, and mapping content to MITRE ATT&CK tactics, while enabling proactive threat hunting and incident response in a hybrid work environment.

Qualifications

• Experience with SIEM platforms and security telemetry.
• Ability to translate threat intel into detections and playbooks.
• Experience with AI-assisted analytics and UEBA.

Responsibilities

• Develop, test, tune, and maintain SIEM detection rules, log correlation searches, alerts, dashboards, and analytics.
• Translate threat intelligence and adversary tactics into actionable detections.
• Build analytics to identify malicious behavior, compromised accounts, and anomalous activity.
• Use AI-driven analytics and UEBA to identify deviations from normal behavior.
• Map detection content to MITRE ATT&CK tactics and techniques.
• Partner with SOC to improve alert triage and escalation criteria.
• Support Incident Response by analyzing logs and developing new detections.
• Identify gaps in logging and improve monitoring coverage.
• Document detection logic and response guidance.
• Track detection effectiveness and false positives.

Skills

Threat hunting

SIEM rule development

Behavioral analytics

Incident response

Detection tuning

Education

Certifications such as GCIH, GCIA, GCDA, GMON, GCTI, GCFA, Security+, CySA+, CISSP

Tools

Microsoft Sentinel

Splunk

Exabeam

Securonix

Job description

Lam Research in the United States is seeking a Cyber Threat Analytics Analyst to identify and develop detections across SIEM and behavioral analytics, partnering with SOC, IR, and Vulnerability Management teams to improve detection coverage and reduce false positives.

The role includes translating threat intel into actionable detections, tuning rules, and mapping content to MITRE ATT&CK tactics, while enabling proactive threat hunting and incident response in a hybrid work environment.